Input validation

2018-01-3020:29:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.3%

JSON

An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing an attacker to modify firmware update packages.

CPENameOperatorVersion
mguard_centerport_firmwarege7.2.0
mguard_centerport_firmwarele8.6.0
mguard_core_tx_vpn_firmwarege7.2.0
mguard_core_tx_vpn_firmwarele8.6.0
mguard_delta_tx\\/tx_firmwarege7.2.0
mguard_delta_tx\\/tx_firmwarele8.6.0
mguard_delta_tx\\/tx_vpn_firmwarege7.2.0
mguard_delta_tx\\/tx_vpn_firmwarele8.6.0
mguard_gt\\/gt_firmwarege7.2.0
mguard_gt\\/gt_firmwarele8.6.0

Name	Operator	Version
mguard_centerport_firmware	ge	7.2.0
mguard_centerport_firmware	le	8.6.0
mguard_core_tx_vpn_firmware	ge	7.2.0
mguard_core_tx_vpn_firmware	le	8.6.0
mguard_delta_tx\\/tx_firmware	ge	7.2.0
mguard_delta_tx\\/tx_firmware	le	8.6.0
mguard_delta_tx\\/tx_vpn_firmware	ge	7.2.0
mguard_delta_tx\\/tx_vpn_firmware	le	8.6.0
mguard_gt\\/gt_firmware	ge	7.2.0
mguard_gt\\/gt_firmware	le	8.6.0